marcos.luna
54 lines
1.4 KiB
Markdown
54 lines
1.4 KiB
Markdown
# screenshot - Capture Screenshot
|
|
|
|
Capture a screenshot of the primary desktop display and upload it to the Mythic server.
|
|
|
|
## Description
|
|
|
|
The `screenshot` command captures a screenshot of the primary desktop display and uploads it to the Mythic server. Uses Windows GDI API (BitBlt) to capture the screen content. Requires an active interactive desktop session.
|
|
|
|
## Syntax
|
|
|
|
```
|
|
screenshot
|
|
```
|
|
|
|
## Examples
|
|
|
|
```
|
|
screenshot
|
|
```
|
|
|
|
## Features
|
|
|
|
- Uses Windows GDI API (BitBlt) to capture the screen content
|
|
- The screenshot is automatically uploaded as a file to Mythic for viewing
|
|
- Requires an active interactive desktop session
|
|
- May be detected by screen capture detection mechanisms, behavioral analysis, and data loss prevention (DLP) systems
|
|
- Large screenshots may trigger network monitoring alerts
|
|
|
|
## Output
|
|
|
|
```
|
|
[screenshot] Capturing screenshot...
|
|
[screenshot] Screenshot captured: 1920x1080 pixels
|
|
[screenshot] Uploading to Mythic...
|
|
[screenshot] Screenshot uploaded successfully
|
|
```
|
|
|
|
## OPSEC Considerations
|
|
|
|
- Screen capture is detected by many security tools
|
|
- May trigger behavioral analysis alerts
|
|
- Large screenshots generate network traffic
|
|
- Requires an active interactive desktop session
|
|
|
|
## Related
|
|
|
|
[Usage Examples](../../../examples.md#screenshot-example)
|
|
|
|
---
|
|
|
|
**Command Category:** System Operations
|
|
**Requires Admin:** No
|
|
**MITRE ATT&CK:** [T1113 - Screen Capture](https://attack.mitre.org/techniques/T1113/)
|